US8600014B2 - Enhancing messaging services using translation gateways - Google Patents

Enhancing messaging services using translation gateways Download PDF

Info

Publication number
US8600014B2
US8600014B2 US13/463,153 US201213463153A US8600014B2 US 8600014 B2 US8600014 B2 US 8600014B2 US 201213463153 A US201213463153 A US 201213463153A US 8600014 B2 US8600014 B2 US 8600014B2
Authority
US
United States
Prior art keywords
message
network
switched network
inbound
customer
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Expired - Lifetime
Application number
US13/463,153
Other versions
US20120213348A1 (en
Inventor
Leo A. D'Angelo
Kamran Izadpanah
John J. Bell
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
J2 Cloud Services LLC
Original Assignee
J2 Global Communications Inc
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Application filed by J2 Global Communications Inc filed Critical J2 Global Communications Inc
Priority to US13/463,153 priority Critical patent/US8600014B2/en
Publication of US20120213348A1 publication Critical patent/US20120213348A1/en
Application granted granted Critical
Publication of US8600014B2 publication Critical patent/US8600014B2/en
Assigned to J2 GLOBAL, INC. reassignment J2 GLOBAL, INC. CHANGE OF NAME (SEE DOCUMENT FOR DETAILS). Assignors: J2 GLOBAL COMMUNICATIONS, INC.
Assigned to ADVANCED MESSAGING TECHNOLOGIES, INC. reassignment ADVANCED MESSAGING TECHNOLOGIES, INC. ASSIGNMENT OF ASSIGNORS INTEREST (SEE DOCUMENT FOR DETAILS). Assignors: J2 GLOBAL, INC.
Assigned to J2 CLOUD SERVICES, LLC reassignment J2 CLOUD SERVICES, LLC ASSIGNMENT OF ASSIGNORS INTEREST (SEE DOCUMENT FOR DETAILS). Assignors: ADVANCED MESSAGING TECHNOLOGIES, INC.
Assigned to MUFG UNION BANK, N.A., AS COLLATERAL AGENT reassignment MUFG UNION BANK, N.A., AS COLLATERAL AGENT SECURITY INTEREST (SEE DOCUMENT FOR DETAILS). Assignors: J2 CLOUD SERVICES, LLC
Anticipated expiration legal-status Critical
Expired - Lifetime legal-status Critical Current

Links

Images

Classifications

    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L69/00Network arrangements, protocols or services independent of the application payload and not provided for in the other groups of this subclass
    • H04L69/08Protocols for interworking; Protocol conversion
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L51/00User-to-user messaging in packet-switching networks, transmitted according to store-and-forward or real-time protocols, e.g. e-mail
    • H04L51/06Message adaptation to terminal or network requirements
    • H04L51/066Format adaptation, e.g. format conversion or compression
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L51/00User-to-user messaging in packet-switching networks, transmitted according to store-and-forward or real-time protocols, e.g. e-mail
    • H04L51/56Unified messaging, e.g. interactions between e-mail, instant messaging or converged IP messaging [CPM]
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04LTRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00Network architectures or network communication protocols for network security
    • H04L63/02Network architectures or network communication protocols for network security for separating internal from external traffic, e.g. firewalls
    • H04L63/0272Virtual private networks
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04MTELEPHONIC COMMUNICATION
    • H04M2203/00Aspects of automatic or semi-automatic exchanges
    • H04M2203/25Aspects of automatic or semi-automatic exchanges related to user interface aspects of the telephonic communication service
    • H04M2203/251Aspects of automatic or semi-automatic exchanges related to user interface aspects of the telephonic communication service where a voice mode or a visual mode can be used interchangeably
    • H04M2203/253Aspects of automatic or semi-automatic exchanges related to user interface aspects of the telephonic communication service where a voice mode or a visual mode can be used interchangeably where a visual mode is used instead of a voice mode
    • HELECTRICITY
    • H04ELECTRIC COMMUNICATION TECHNIQUE
    • H04MTELEPHONIC COMMUNICATION
    • H04M3/00Automatic or semi-automatic exchanges
    • H04M3/42Systems providing special services or facilities to subscribers
    • H04M3/50Centralised arrangements for answering calls; Centralised arrangements for recording messages for absent or busy subscribers ; Centralised arrangements for recording messages
    • H04M3/53Centralised arrangements for recording incoming messages, i.e. mailbox systems
    • H04M3/533Voice mail systems

Definitions

  • An embodiment of the invention relates to the field of messaging through circuit and packet data networks. Specifically, systems, methods and processes for identification, authentication, routing, delivery of electronic messages across one or more communication networks and transmission methods, are described here. These messages may be, but are not limited to, facsimile, voice messages, images, electronic documents, and software elements.
  • a provider of unified messaging services may have the following capabilities for servicing the messaging needs of its customers.
  • each customer is assigned a unique telephone number.
  • the customer can give this number to others; the others can then leave messages for the customer at that number (e.g., voice and facsimile messages).
  • the way these messages are processed and stored may be as follows.
  • a network of servers, which can be owned and/or managed by the service provider, is configured to capture an inbound message that has been transmitted to the customer's phone number over the public switched telephone network (PSTN). Once captured, typically in digital form, the message is then sent, as an attachment to an email message, to the customer's email address. This is the address of an email box that typically will have been previously established by the customer; the customer would have reported his email address to the service provider.
  • PSTN public switched telephone network
  • This technique for unified messaging has a number of advantages for the customer, including a single interface for retrieving different types of messages, and a relatively inexpensive storage area for her messages.
  • the provider's server network can span different cities, states, and countries, so customers may be assigned telephone numbers over a wide geographical range.
  • a customer living in New York City may request a telephone number that has a New York City area code.
  • a server in that area code can then be configured to recognize incoming calls to that customer's telephone number, capture the inbound message and then address the message (via an email attachment, for example) to the customer's data network address.
  • a central database managed by the service provider and accessible by all of the servers (in the service provider's network), can be used to associate each customer's phone number with his data network address and his message forwarding instructions (such as the file format of the email attachment).
  • the server uses the database to determine where to route the message for a particular customer, i.e. which node of the provider's network can most cost efficiently forward the message, or which node has the needed resource to translate the message into a certain format required by the customer's machine.
  • FIG. 1 illustrates a block diagram of a network environment in which a messaging service according to one or more embodiments of the invention may be implemented.
  • FIG. 2 illustrates a table of information that may be used by a translation gateway, for routing inbound messages to corporate subscribers.
  • FIGS. 3A and 3B depict a network environment where the messaging service provides security services on a per connection basis.
  • FIGS. 4A and 4B show an environment where the messaging service provides security services in the form of encryption on a per message basis.
  • FIG. 5 illustrates a block diagram of an environment for implementing a secure messaging service, using SMTP over SSL.
  • FIG. 6 is a block diagram of an environment for implementing a secure messaging service suitable for individual subscribers.
  • the transfer of messages is enhanced by using translation gateways at the edge of the data networks.
  • the translation gateway may be designed to provide one or more translation functions that are performed upon messages, to for example provide security services between the sender and recipient over a hostile data network.
  • the architecture involving translation gateways allows the environment or system as a whole to scale more easily as the number of subscribers or customers increase. Such subscribers and customers are those who are under contract with a service provider to pay for the security services used in delivery of their messages.
  • voice mail and fax mail messages may be modified to work with other types of electronic messages.
  • a unified messaging service provider (UMSP) network 110 is a data network of different types of resources that may be owned and administered by a service provider entity, such as the assignee of this application namely j2 Global Communications, Inc. of Hollywood, Calif.
  • a service provider entity such as the assignee of this application namely j2 Global Communications, Inc. of Hollywood, Calif.
  • the UMSP network 110 may be one in which Internet Protocol (IP) addresses for the nodes of the network are assigned by an administrator that is an employee of the service provider.
  • IP Internet Protocol
  • the UMSP network 110 is a private network in that it has a security barrier against unauthorized access to its nodes and its content.
  • the UMSP network 110 may also be viewed as a globally distributed interface to a circuit switched network 160 (also referred to as the public switched telephone network, PSTN, or telephony network).
  • the UMSP network 110 has resources that can capture inbound messages that originate or pass through the circuit switched network 160 , as well as transmit outbound messages through the circuit switched network 160 .
  • a source of the inbound message may be a conventional facsimile machine 170 or a computer (not shown) with facsimile capability, and any type of telephone unit 171 . These devices may also be used as the ultimate recipient of outbound messages, for example via telephone calls dialed by a resource of the UMSP network 110 .
  • the ultimate destination of an inbound message may be a client software program running in a notebook computer 180 , where the client process and in this case notebook computer 180 are owned or administered by a subscriber or customer of the messaging service.
  • This subscriber may be an individual, or it may be an organization such as a company that has paid the service provider for the messaging service to be used by a number of its employees or affiliates.
  • the subscriber has or administers a customer network 150 which is a packet-switched or data network that may also be considered private in that unauthorized access to its nodes and content is prohibited.
  • the customer network 150 may be as small as a single local area network (LAN) or it may be made of multiple networks connected to each other to form a wide area or enterprise network.
  • LAN local area network
  • Putting the customer network 150 in communication with the UMSP network 110 is a hostile data network 130 , such as the public Internet.
  • Data network 130 is deemed hostile because messages that are transferred through that network are not guaranteed any form of privacy. Nevertheless, the data network 130 may be used as an efficient means for communicating messages between the customer network 150 and the UMSP network 110 over a wide geographic area, as described here.
  • a translation gateway 141 At the edge of the customer network 150 , and therefore considered to be a node of the customer network 150 , is a translation gateway 141 .
  • Each of these translation gateways has a port (in, for example, an application layer or other layer above the network layer of the Open Systems Interconnect Reference Model data network communications protocol) that allows access to the hostile data network 130 .
  • Each gateway 120 , 141 has certain translation functions that as described here enhance the messaging service provided to the subscribers.
  • the translation gateway may thus be viewed as a protocol converter.
  • An example of policy-based secure message delivery software that can be used to implement some of the functionality of the translation gateways 120 , 141 is the MMS SECURE REDIRECT solution by Tumbleweed Communications, Corp., Redwood City, Calif.
  • the translation gateways 120 , 141 are capable of sending and receiving inbound and outbound messages using standard network protocols, such as simple mail transfer protocols (SMTP) which is a protocol for sending email messages between servers. Email messages can then be retrieved with an email client program that uses either the post office protocol (POP) or Internet message access protocol (IMAP).
  • SMTP simple mail transfer protocol
  • POP post office protocol
  • IMAP Internet message access protocol
  • Another communications protocol that may be used to transfer messages between a translation gateway and another node is web-based distributed authoring and versioning (WebDAV) which is a platform independent extension to the hypertext transport protocol (HTTP) that allows users to collaboratively edit and manage files on remote web servers.
  • WebDAV web-based distributed authoring and versioning
  • HTTP hypertext transport protocol
  • Yet another communication protocol that may be used is the session initiated protocol (SIP) which is a signaling protocol for Internet conferencing, telephony, presence, events notification, and instant messaging. The protocol is used to initiate call setup, routing, authentication and other feature messages
  • a domain here refers to a group of computers or devices on a network that are administered as a unit, with common rules and procedures.
  • domains are defined by the IP address. All devices sharing a common part of the IP address are said to be in the same domain.
  • a large or corporate customer may register one or more domains in its name.
  • a translation gateway in response to receiving a message on a given transport, performs a translation function based on a set of rules that are contained within the message body or are within a configuration script of the gateway itself. Possible translation functions include translation between protocols (for example from an SMTP format to an instant messaging format, and back), as well as privacy/security which is described below.
  • the gateway translates the message to its intended format or otherwise applies the translation function to the message, and then resends the message to its ultimate recipient.
  • a fax message that has been transmitted by the fax machine 170 is captured by an inbound resource of the UMSP network 110 .
  • the UMSP network 110 may allow the subscriber to customize for example an outgoing message that is played back in response to an incoming call.
  • the inbound message is routed through the UMSP network 110 to the appropriate translation gateway 120 .
  • the message is routed to the translation gateway 120 that has been assigned for handling message traffic for that subscriber. See, for example, the look-up table shown in FIG. 2 .
  • other translation gateways are not shown in FIG. 1 but may of course be present depending upon how many subscribers the service has and the amount of expected message traffic.
  • the architecture may thus be scaled relatively easily, by simply adding additional translation gateways as the number of subscribers or messages increase.
  • the message may be converted for example from a fax protocol format into a digital format such as TIFF or PDF, prior to being delivered to the translation gateway 120 .
  • the translation gateway 120 Upon receiving the inbound message, the translation gateway 120 determines which address to forward the message, using for instance a lookup table such as the one illustrated in FIG. 2 .
  • a lookup table such as the one illustrated in FIG. 2 .
  • FIG. 2 shows that a set of inbound telephone numbers that has been assigned to the subscriber company A is associated with the domain name companyA.com. There may be a different individual user associated with each telephone number as shown, so that a complete address may be defined as the combination username@companyA.com.
  • Such detailed information about the identity of the individual users or their complete, individual addresses need not be present in the translation gateway or in the UMSP network in general, in order for the gateway 120 to do its job of forwarding the messages to the customer network 150 (see FIG. 1 ).
  • the service may thus be operated on a per domain basis, with all inbound messages that arrive on the inbound telephone numbers of a given customer (as determined by the lookup table in FIG. 2 , for example) being pushed to the corresponding customer's translation gateway network address. It will then be up to the translation gateway 141 to match the correct email address (or other data network address on the customer network 150 ) to each inbound message, using for instance, the inbound telephone number as an index to a look-up table.
  • forwarding is achieved by for example attaching the message to an email that is addressed to a subscriber's predefined email address (e.g., smtp@companyA.com) that has been assigned to the translation gateway 141 .
  • the message traverses the hostile data network 130 on its way to the translation gateway 141 .
  • an embodiment of the invention is directed to providing the inbound message with privacy as it traverses this hostile data network.
  • This security feature may be provided in different ways, for example either through a secure connection such as a virtual private network tunnel (see FIGS. 3A and 3B described below) or encryption on a per message basis such as using the Secure Multipurpose Internet Mail Extensions (S-MIME) protocol ( FIGS.
  • S-MIME Secure Multipurpose Internet Mail Extensions
  • SMTP Secure Sockets Layer
  • SSL Secure Sockets Layer
  • inbound messages are received over the hostile data network 130 at the translation gateway 141 , they may be forwarded to an email server for storage (not shown) from which they can be accessed by a client program running in the notebook computer 180 and which has been configured (with a security certificate that allows access to its user's email box) by an administrator of the customer network.
  • this client program may alternatively be running in other types of devices, such as a desktop computer, a personal digital assistant (PDA), a mobile phone unit (not shown) or any type of networked electronic appliance.
  • PDA personal digital assistant
  • the outbound service may be implemented as follows. As part of its contract for secure messaging services, the subscriber is informed, by the service provider, of a domain name such as secure.outboundservice.com which represents a domain of outbound resources in the UMSP network 110 that is owned or administered by the service provider. In the embodiment of FIG. 1 , it is the same translation gateway 120 used for inbound services that is assigned the domain name for outbound service. A client program, such as an email client of the subscriber, may then send an outbound message, in the form of an attachment for example, that is addressed to the domain name.
  • a domain name such as secure.outboundservice.com which represents a domain of outbound resources in the UMSP network 110 that is owned or administered by the service provider.
  • a client program such as an email client of the subscriber, may then send an outbound message, in the form of an attachment for example, that is addressed to the domain name.
  • the service provider further instructs the subscriber to add the destination, circuit switched network address (e.g., telephone number) as a prefix (e.g., 13108205988@secure.outboundservice.com) prior to sending the outbound message.
  • This prefix will then be interpreted by the translation gateway 120 , to determine the appropriate outbound resource within the UMSP network 110 that will be able to forward the message to its ultimate destination, namely the indicated telephone number.
  • the outbound message is first delivered to the translation gateway 141 via email through the customer network 150 .
  • This getaway 141 determines, through for example a lookup table (not shown), the data network address of the translation gateway 120 belonging to the service provider.
  • the translation gateway 141 recognizes the mapping between the domain name in the address of the email message and, for example, an IP address of the service provider's translation gateway 120 .
  • the message, and in particular the attachment in the case of email is then sent through the hostile data network 130 while maintaining privacy, and arrives at the translation gateway 120 .
  • the translation gateway 120 may determine what is the most efficient manner of delivering the message to its intended recipient.
  • an outbound resource that has a fax telephoning card may be designated to receive the message.
  • the message is a voice message that is for example an audio or video recording, then a audio or video telephoning card that can relay such a message to the intended recipient is designated to receive the message.
  • the message may be placed into a queue from which messages are pulled, according to their types, by the various outbound resources as these become available to transmit.
  • the message then may be routed through the UMSP network 110 which, as mentioned above, may be a globally distributed network.
  • the translation gateway 120 may be located in one country but the outbound resource which places the phone call, for example to transmit the fax or play back the voice message, or otherwise transmits the outbound message, is located in another country.
  • FIGS. 3A and 3B what is shown is a network environment where the messaging service provides security services on a per connection basis.
  • a virtual private network (VPN) tunnel is established between predefined ports of the translation gateway 120 and translation gateway 141 , for customer B.
  • the VPN tunnel at port X of gateway 120 may be viewed as an extension of customer B's data network 350
  • the one at port Y of gateway 121 is an extension of customer A's data network 351 .
  • the gateways actually may be implemented as routers, where the gateways 120 and 141 feature routers that are preferably both administered by customer B, while those in gateways 121 , 142 are administered by in this case customer A.
  • VPN tunnels may be established for the benefit of another corporate or institutional subscriber.
  • Data traffic through the VPN tunnels is secure in that as messages are traversing through the data network 130 their privacy, as well as other security features such as integrity, are maintained in the face of attacks.
  • the VPN tunnels may be used for both inbound and outbound messages.
  • each of the routers shown in FIG. 3A has a unique IP address on the hostile data network 130 . After a port is negotiated between two routers, the two routers form a virtual private network with the ability to communicate messages securely between them, over the hostile data network 130 .
  • the gateway 141 (router for customer B) is a node of customer B's data network 350 , but not of the UMSP network 110 (see FIG. 3B ).
  • the router in the translation gateway 142 is a node of customer A's data network 351 , but not the UMSP network 110 .
  • the routers in both gateways 120 , 121 are different nodes of both the hostile data network 130 and the UMSP network 110 , but not of either customer A's data network 350 or customer B's data network 351 .
  • FIG. 3B shows a number of devices that can source inbound messages, and receive outbound messages. These devices include a conventional facsimile machine 371 , 372 , a landline telephone unit 373 , 374 , a cellular mobile unit 375 , and a desktop or notebook computer 377 . In this embodiment, all of these devices communicate through the circuit switched network (PSTN) 160 .
  • PSTN circuit switched network
  • the service provider may contract with local phone companies to lease a number of telephone lines of the circuit switched network 160 .
  • the switches 380 - 382 are communicatively coupled to notify one or more voice/fax cards 390 , that are in respective inbound and outbound servers 392 - 394 , that there is an incoming call to a given inbound address (e.g., telephone number) assigned to a line leased by the service provider.
  • the servers 392 - 394 are respective nodes of the UMSP network 110 .
  • a customer information database 396 may also be provided as part of the UMSP network 110 , as a central storage for customer account information. Such customer account information would include for example the information shown in the table of FIG. 2 .
  • translation options if any for each subscriber may also be included in this database.
  • This database 396 may also be accessed by the translation gateway 120 , to determine which translation functions need to be applied to the messages of a particular subscriber. For example, certain messages may need to be translated from one protocol to another, or from one format to another, prior to being forwarded. Thus, the database 396 may indicate that facsimile messages should be translated into an instant messaging (IM) format for use by a particular client (IM) process 379 (see FIG. 3A ), rather than by an email client 364 .
  • IM instant messaging
  • Other customer-specified translation and filtering rules may also be stored in the database 396 . Of course, portions of the database 396 may be copied to other elements of the UMSP network within local, cache-type storage units (not shown).
  • the translation gateway 141 for customer B is configured in this embodiment to recognize that different types of inbound messages through its port X may need to be processed differently. For example, email messages would be forwarded to email server 362 (which may be a separate node of customer B's data network 350 ), while other types of messages such as instant messaging (IM) would be forwarded to an IM storage area or directly to the client process 379 if the IM client is on line.
  • email server 362 which may be a separate node of customer B's data network 350
  • IM instant messaging
  • Other forms of groupware may also be supported by the translation gateway 141 , to deliver inbound messages to a predefined client process, or receive outbound messages from certain client processes.
  • the above-described embodiments of the messaging service are a for-profit service for which subscribers have agreed to pay on a monthly basis, or some other interval for billing. These secure services may be offered to the subscribers at an additional premium, above a basic set of unified messaging services in which inbound and/or outbound messages are delivered for the subscriber without guaranteeing their privacy or integrity as they traverse a hostile data network.
  • the service provider may provide the subscriber a report or bill for example on a monthly basis that details the charges incurred by the subscriber including the type of service used and how it was used as well as how often it was used.
  • FIGS. 4A and 4B show a network environment where inbound messages are delivered securely to corporate subscribers company A and company B using encryption on a per-message basis.
  • the translation gateway 120 has a security function that when applied precludes unauthorized access to the content of inbound messages as these are forwarded by the translation gateway 120 through the hostile data network, in this case being the Internet 230 , to either translation gateway 141 or 241 (see FIG. 4B ).
  • the same translation gateway 120 may be used to apply a security function to messages on behalf of more than one corporate subscriber.
  • the security function in this embodiment is to translate the inbound messages that have been captured by an inbound resource 420 (and which may originate from a conventional fax machine 470 ) into S-MIME format, and address these encrypted messages to the domain name of the respective customer A or B (previously assigned to the translation gateway 141 or 241 ).
  • these encrypted messages may be received by the translation gateway 141 or 241 , they may be converted into MIME in this embodiment, and then handed off to an email server that is on the data network 452 (and administered by company A), or that is on the data network 454 (administered by company B).
  • These email messages may then be accessed by authorized client processes that are running in for example a personal digital assistant (PDA) 455 or a notebook computer 457 , over their respective data networks 452 , 454 .
  • PDA personal digital assistant
  • the same translation gateways 141 , 241 used for inbound service may also be used for outbound service.
  • a security function may be added by which an outbound email message (sourced from for example the PDA 455 or notebook computer 457 ) is translated from MIME to S-MIME, after being pulled from the respective email servers 424 , 428 .
  • all email messages addressed to the domain secure.outboundservice.com are pulled from the email server and following the conversion to S-MIME are forwarded through the Internet 230 to the translation gateway 120 (which is assigned to receive all messages addressed to that domain).
  • the translation gateway 120 and the translation gateways 141 , 241 had previously exchanged security certificate keys for implementing the S-MIME protocol, to ensure privacy on a per message encryption basis through the Internet 230 .
  • a single set of security certificate keys may be exchanged that is applied by the gateway 141 or 241 , to encrypt all of its outbound messages addressed to the service provider's domain at secure.outboundservice.com.
  • the gateway 120 is administered by the service provider, the gateways 141 , 241 are preferably administered by the respective subscribers, company A and company B.
  • the outbound messages are received in S-MIME format, they are verified as being from a current subscriber (e.g., by checking the “from” field in the case of an email message), and are then decrypted and routed to the appropriate outbound resource 421 , in the UMSP network 110 (see FIG. 4A ).
  • the outbound message is an email message that has a facsimile attachment (e.g., a word processor file or an image file) and is addressed to 13108205988@secure.outboundservice.com
  • a routing function in the UMSP network 110 will recognize that the outbound resource 421 has a fax transmission card located in the 310 -area code, such that the attachment can be transmitted relatively cheaply as a local, facsimile protocol call made from that fax card to the given number identified in the prefix of the email address.
  • Another embodiment of the invention bypasses or avoids the need for a translation gateway 141 that is on the customer network 452 (see FIG. 4B ).
  • the translation gateway 120 would still perform the conversion to S/MIME (for inbound messages) and from S/MIME (for outbound messages), for transmission across the Internet 230 of messages on behalf of company A.
  • the S/MIME message is delivered directly to the email server 424 on customer network 452 , and then it is the customer's email client software running in the PDA 455 which provides the decryption functionality required for the customer to read the message.
  • every user or affiliate of company A, on the customer network 452 may be required to obtain a secure certificate, exchange the certificate with the UMSP network 110 and configure their e-mail client to utilize this certificate for reading encrypted messages.
  • the administrative overhead to provide such functionality may be so great for a medium to large customer network (where there are a large number of affiliates that will use the secure messaging service) as to justify the alternative solution of the translation gateway 141 .
  • a large, distributed UMSP network 110 may consist of hundreds if not thousands of devices distributed globally, some for capturing inbound messages (such as voice and facsimile over the PSTN) and others for transmitting outbound messages (again, such as facsimile and voice over the PSTN).
  • the translation gateway 120 By utilizing the translation gateway 120 to provide the translation functions that are applied to inbound and/or outbound messages, additional functionality can be centralized within the UMSP network 110 rather than distributed to every device within the network. This allows the service provider to provide enhanced functionality quickly and cost effectively without requiring a “fork lift upgrade” to the UMSP network 110 .
  • the higher level, data communications protocol used to securely send inbound and outbound messages through the Internet 556 is referred to as a SSL tunnel that connects an email server 524 in company A's internal data network 552 , to an email server 564 in the service provider's internal data network 560 .
  • the email servers 524 , 564 are administered by company A and the service provider, respectively.
  • the inbound and outbound messages are in this embodiment email messages that may be formed in accordance with SMTP and communicated through the Internet 556 “on top of” SSL.
  • This SSL tunnel is implemented by software that allows the encryption of arbitrary TCP connections inside SSL.
  • the SSL tunnel application may allow one to secure non-SSL aware daemons and protocols (like POP, IMAP, LDAP, etc.) by having SSL tunnel provide the encryption, without requiring changes to the daemon's code.
  • the SSL tunnel is a transient connection that is created when, for example, in the case of an inbound message, the service provider's email server 564 has received an inbound message (including, for example, a facsimile or voice file attachment) that is addressed to the domain of company A.
  • the SSL tunnel application (which may be running in the email server 564 ) recognizes that the company A domain is handled by company A's email server 524 , and on that basis creates the SSL tunnel by exchanging security information with the email server 524 .
  • a corresponding SSL tunnel application is running in the company A domain, and in particular in the email server 524 , so as to complete the negotiation of security information.
  • the inbound message under control of for instance SMTP, is handed to the SSL tunnel program which then “wraps” the inbound message and sends the message through the SSL tunnel to the email server 524 .
  • the SSL wrapper is undone and the message is handed up to the SMTP software component, where the latter makes the inbound message available for access by a client process in company A's internal data network 552 .
  • this inbound message within the email server 524 may now be accessed through a variety of different client processes that may be running in, for example, a PDA 504 , a mobile phone unit 508 (with data or text capability, in addition to voice, and the further capability of accessing the internal data network 552 through a wireless data connection), a notebook computer 516 , or a desk top computer 520 .
  • client processes may be running in, for example, a PDA 504 , a mobile phone unit 508 (with data or text capability, in addition to voice, and the further capability of accessing the internal data network 552 through a wireless data connection), a notebook computer 516 , or a desk top computer 520 .
  • Such a secure transfer of the inbound message from the service provider's network 560 to a subscriber's network is seamless to the client process.
  • a SSL tunnel application that may be running in the email server 524 obtains knowledge of these outbound messages that may have been enqueued, and selects one (addressed to the service provider's domain). An SSL wrapper is then applied to the selected outbound message and a SSL tunnel is negotiated with the email server 564 in the service provider's domain. After the outbound message securely arrives at the service provider's domain, the SSL wrapper is undone and the outbound message is enqueued in the email server 564 .
  • Software that may be also running in the email server 564 detects that the outbound message is from company A's domain, and accordingly verifies (through some customer information database, not shown) that the account of company A is current.
  • the outbound message may then be transferred, still using SMTP for example, to any one of the outbound resources 568 , 570 , and 572 for instance, depending upon which can most efficiently forward the outbound message into the PSTN 580 .
  • the outbound message is transmitted through any one of telecommunication lines 569 , 571 , and 573 , after having invoked the circuit switch network address of the recipient's receiver, e.g.
  • a landline telephone 581 a mobile phone 583 , or a fax machine 584 .
  • the secure sending of outbound messages from the subscriber's network to that of the service provider is seamless to the subscriber's client process from which the message originated.
  • SSL tunnel application may also obviate the need for more expensive and more complex software that supports VPN tunnels ( FIG. 3A ), or an S-MIME connection ( FIG. 4A ).
  • additional software that provides billing information to the customer, including identifying the inbound and outbound messages that were successfully transferred, as well as the total cost to the customer for such services, may also be needed to run in the service provider's internal data network 560 , but is not explicitly shown.
  • FIG. 6 this figure is a block diagram of an environment for implementing a secure messaging service that may be particularly suitable for individual subscribers.
  • inbound messages are provided with privacy as they traverse the Internet 230 , as follows.
  • the messages are captured by an inbound resource 420 , similar to the situation in FIG. 4A .
  • the inbound message may originate as an incoming telephoning call made from either a facsimile machine 470 or a telephone unit 472 to the inbound circuit-switched address (here, telephone number) assigned to the subscriber.
  • the inbound message is stored in a message storage server 508 on behalf of the subscriber.
  • the storage server 508 may be a separate node of the UMSP network 110 .
  • a messaging application server 510 which is also another node of the UMSP network 110 , obtains knowledge of the stored message and will then send a resource locator link (such as Universal Resource Locator, URL) over a hostile data network such as the Internet 230 , to a client process actually being used by, or to be used by, a subscriber of the secure messaging service.
  • the messaging application server 510 may be implemented as a modified version of the secure message delivery technology referred to as IME by Tumbleweed Communications, Corp., Redwood City, Calif.
  • the client process may be a client program (e.g., email; instant messaging) running in once again for example a desktop computer 514 , a notebook computer 516 , or other networked data device.
  • the subscriber may then be instructed by the service provider (e.g., via a text prompt that accompanied the link) to invoke this link so as to establish a connection with the UMSP network 110 (and in this embodiment, the messaging application server 510 ) to securely receive the stored inbound message.
  • the connection may be, for example, a Secure Socket Layer (SSL) connection over which all data being transferred over the Internet 230 to the client process is encrypted for maintaining privacy.
  • SSL Secure Socket Layer
  • the subscriber may be prompted to login to a secure web site after having invoked its SSL URL, with a password known only to the subscriber and that was previously assigned by the service provider, so that only the subscriber can login to retrieve her inbound messages.
  • processors or “servers”
  • the functions may be provided through the use of dedicated hardware as well as hardware capable of executing software in association with appropriate software.
  • the functions may be provided by a single dedicated processor, by a single shared processor, or by a plurality of individual processors, some of which may be shared.
  • explicit use of the term “processor”, “server”, or “computer” should not be construed to refer exclusively to hardware capable of executing software, and may implicitly include, without limitation, digital signal processor (DSP) hardware, read-only memory (ROM) for storing software, random access memory (RAM), and non-volatile storage.
  • DSP digital signal processor
  • ROM read-only memory
  • RAM random access memory
  • non-volatile storage Other hardware and/or software, standard and/or custom, may also be included.

Abstract

In one embodiment, a translation gateway is for use between a network of a messaging service provider and a hostile data network. The gateway is to forward messages using a secure connection through the hostile network, to a customer's network. Different types of inbound messages (e.g., voice; fax) can be delivered to a single client process running on a customer machine on the customer network. In addition, the translation gateway may be used to securely forward different types of outbound messages originating from the client process to the service provider's network (where the messages are retransmitted as voice calls or facsimiles into a telephone network). Other embodiments are also described and claimed.

Description

This application is a continuation of Ser. No. 12/471,225, filed May 22, 2009, entitled “Enhancing Messaging Services Using Translation Gateways” (pending), which is a continuation of Ser. No. 10/686,107, filed Oct. 15, 2003, which issued as U.S. Pat. No. 7,539,291 on May 26, 2009, and which claims the benefit of the earlier U.S. filing date of Provisional Application No. 60/419,166, filed Oct. 16, 2002.
BACKGROUND
An embodiment of the invention relates to the field of messaging through circuit and packet data networks. Specifically, systems, methods and processes for identification, authentication, routing, delivery of electronic messages across one or more communication networks and transmission methods, are described here. These messages may be, but are not limited to, facsimile, voice messages, images, electronic documents, and software elements.
A provider of unified messaging services may have the following capabilities for servicing the messaging needs of its customers. First, each customer is assigned a unique telephone number. The customer can give this number to others; the others can then leave messages for the customer at that number (e.g., voice and facsimile messages). The way these messages are processed and stored may be as follows. A network of servers, which can be owned and/or managed by the service provider, is configured to capture an inbound message that has been transmitted to the customer's phone number over the public switched telephone network (PSTN). Once captured, typically in digital form, the message is then sent, as an attachment to an email message, to the customer's email address. This is the address of an email box that typically will have been previously established by the customer; the customer would have reported his email address to the service provider. The customer can now retrieve the messages, by accessing her email box, detaching and then viewing or playing back the attached messaged. This technique for unified messaging has a number of advantages for the customer, including a single interface for retrieving different types of messages, and a relatively inexpensive storage area for her messages.
The provider's server network can span different cities, states, and countries, so customers may be assigned telephone numbers over a wide geographical range. Thus, a customer living in New York City may request a telephone number that has a New York City area code. A server in that area code can then be configured to recognize incoming calls to that customer's telephone number, capture the inbound message and then address the message (via an email attachment, for example) to the customer's data network address. A central database managed by the service provider and accessible by all of the servers (in the service provider's network), can be used to associate each customer's phone number with his data network address and his message forwarding instructions (such as the file format of the email attachment). The server uses the database to determine where to route the message for a particular customer, i.e. which node of the provider's network can most cost efficiently forward the message, or which node has the needed resource to translate the message into a certain format required by the customer's machine.
BRIEF DESCRIPTION OF THE DRAWINGS
The invention is illustrated by way of example and not by way of limitation in the figures of the accompanying drawings in which like references indicate similar elements. It should be noted that references to “an” embodiment of the invention in this disclosure are not necessarily to the same embodiment, and they mean at least one.
FIG. 1 illustrates a block diagram of a network environment in which a messaging service according to one or more embodiments of the invention may be implemented.
FIG. 2 illustrates a table of information that may be used by a translation gateway, for routing inbound messages to corporate subscribers.
FIGS. 3A and 3B depict a network environment where the messaging service provides security services on a per connection basis.
FIGS. 4A and 4B show an environment where the messaging service provides security services in the form of encryption on a per message basis.
FIG. 5 illustrates a block diagram of an environment for implementing a secure messaging service, using SMTP over SSL.
FIG. 6 is a block diagram of an environment for implementing a secure messaging service suitable for individual subscribers.
DETAILED DESCRIPTION
Techniques are described for the communication of messages between a circuit switched network such as a telephone network and a packet switch network (also referred to as a data network). The transfer of messages is enhanced by using translation gateways at the edge of the data networks. The translation gateway may be designed to provide one or more translation functions that are performed upon messages, to for example provide security services between the sender and recipient over a hostile data network. In addition, the architecture involving translation gateways allows the environment or system as a whole to scale more easily as the number of subscribers or customers increase. Such subscribers and customers are those who are under contract with a service provider to pay for the security services used in delivery of their messages. Several embodiments of the invention are now described using voice mail and fax mail messages. However, the translation gateways as well as the methodology described here may be modified to work with other types of electronic messages.
Beginning with FIG. 1, this figure illustrates a block diagram of a network environment in which a messaging service according to one or more embodiments of the invention may be implemented. The network environment is divided into several different networks. First, a unified messaging service provider (UMSP) network 110 is a data network of different types of resources that may be owned and administered by a service provider entity, such as the assignee of this application namely j2 Global Communications, Inc. of Hollywood, Calif. For example, the UMSP network 110 may be one in which Internet Protocol (IP) addresses for the nodes of the network are assigned by an administrator that is an employee of the service provider. In addition, the UMSP network 110 is a private network in that it has a security barrier against unauthorized access to its nodes and its content. The UMSP network 110 may also be viewed as a globally distributed interface to a circuit switched network 160 (also referred to as the public switched telephone network, PSTN, or telephony network). The UMSP network 110 has resources that can capture inbound messages that originate or pass through the circuit switched network 160, as well as transmit outbound messages through the circuit switched network 160. A source of the inbound message may be a conventional facsimile machine 170 or a computer (not shown) with facsimile capability, and any type of telephone unit 171. These devices may also be used as the ultimate recipient of outbound messages, for example via telephone calls dialed by a resource of the UMSP network 110.
The ultimate destination of an inbound message may be a client software program running in a notebook computer 180, where the client process and in this case notebook computer 180 are owned or administered by a subscriber or customer of the messaging service. This subscriber may be an individual, or it may be an organization such as a company that has paid the service provider for the messaging service to be used by a number of its employees or affiliates. In the embodiment shown in FIG. 1, the subscriber has or administers a customer network 150 which is a packet-switched or data network that may also be considered private in that unauthorized access to its nodes and content is prohibited. The customer network 150 may be as small as a single local area network (LAN) or it may be made of multiple networks connected to each other to form a wide area or enterprise network.
Putting the customer network 150 in communication with the UMSP network 110 is a hostile data network 130, such as the public Internet. Data network 130 is deemed hostile because messages that are transferred through that network are not guaranteed any form of privacy. Nevertheless, the data network 130 may be used as an efficient means for communicating messages between the customer network 150 and the UMSP network 110 over a wide geographic area, as described here.
At the edge of the customer network 150, and therefore considered to be a node of the customer network 150, is a translation gateway 141. In this embodiment, there is also another translation gateway 120 that is a node of and is on the edge of the UMSP network 110. Each of these translation gateways has a port (in, for example, an application layer or other layer above the network layer of the Open Systems Interconnect Reference Model data network communications protocol) that allows access to the hostile data network 130. Each gateway 120, 141 has certain translation functions that as described here enhance the messaging service provided to the subscribers. The translation gateway may thus be viewed as a protocol converter. An example of policy-based secure message delivery software that can be used to implement some of the functionality of the translation gateways 120, 141 is the MMS SECURE REDIRECT solution by Tumbleweed Communications, Corp., Redwood City, Calif.
The translation gateways 120, 141 are capable of sending and receiving inbound and outbound messages using standard network protocols, such as simple mail transfer protocols (SMTP) which is a protocol for sending email messages between servers. Email messages can then be retrieved with an email client program that uses either the post office protocol (POP) or Internet message access protocol (IMAP). Another communications protocol that may be used to transfer messages between a translation gateway and another node is web-based distributed authoring and versioning (WebDAV) which is a platform independent extension to the hypertext transport protocol (HTTP) that allows users to collaboratively edit and manage files on remote web servers. Yet another communication protocol that may be used is the session initiated protocol (SIP) which is a signaling protocol for Internet conferencing, telephony, presence, events notification, and instant messaging. The protocol is used to initiate call setup, routing, authentication and other feature messages to end points within an IP domain.
A domain here refers to a group of computers or devices on a network that are administered as a unit, with common rules and procedures. Within the Internet for example, domains are defined by the IP address. All devices sharing a common part of the IP address are said to be in the same domain. A large or corporate customer may register one or more domains in its name.
A translation gateway in response to receiving a message on a given transport, performs a translation function based on a set of rules that are contained within the message body or are within a configuration script of the gateway itself. Possible translation functions include translation between protocols (for example from an SMTP format to an instant messaging format, and back), as well as privacy/security which is described below. The gateway translates the message to its intended format or otherwise applies the translation function to the message, and then resends the message to its ultimate recipient. Thus for example in FIG. 1, a fax message that has been transmitted by the fax machine 170 is captured by an inbound resource of the UMSP network 110. This was preceded by a telephone call made by the fax machine 170 using the circuit switched network 160, to an inbound telephone number that has been assigned, by the UMSP network administrator or another UMSP agent, to a particular subscriber. This inbound telephone number is used by the subscriber to receive telephone fax or voice mail messages (or both). The UMSP network 110 may allow the subscriber to customize for example an outgoing message that is played back in response to an incoming call.
Once captured, the inbound message is routed through the UMSP network 110 to the appropriate translation gateway 120. Thus, for example, if the inbound message is on behalf of a particular corporate subscriber, the message is routed to the translation gateway 120 that has been assigned for handling message traffic for that subscriber. See, for example, the look-up table shown in FIG. 2. For simplicity, other translation gateways are not shown in FIG. 1 but may of course be present depending upon how many subscribers the service has and the amount of expected message traffic. The architecture may thus be scaled relatively easily, by simply adding additional translation gateways as the number of subscribers or messages increase. Note also that the message may be converted for example from a fax protocol format into a digital format such as TIFF or PDF, prior to being delivered to the translation gateway 120.
Upon receiving the inbound message, the translation gateway 120 determines which address to forward the message, using for instance a lookup table such as the one illustrated in FIG. 2. The example in FIG. 2 shows that a set of inbound telephone numbers that has been assigned to the subscriber company A is associated with the domain name companyA.com. There may be a different individual user associated with each telephone number as shown, so that a complete address may be defined as the combination username@companyA.com. Such detailed information about the identity of the individual users or their complete, individual addresses, however, need not be present in the translation gateway or in the UMSP network in general, in order for the gateway 120 to do its job of forwarding the messages to the customer network 150 (see FIG. 1). The service may thus be operated on a per domain basis, with all inbound messages that arrive on the inbound telephone numbers of a given customer (as determined by the lookup table in FIG. 2, for example) being pushed to the corresponding customer's translation gateway network address. It will then be up to the translation gateway 141 to match the correct email address (or other data network address on the customer network 150) to each inbound message, using for instance, the inbound telephone number as an index to a look-up table.
At the translation gateway 120, forwarding is achieved by for example attaching the message to an email that is addressed to a subscriber's predefined email address (e.g., smtp@companyA.com) that has been assigned to the translation gateway 141. The message traverses the hostile data network 130 on its way to the translation gateway 141. Accordingly, an embodiment of the invention is directed to providing the inbound message with privacy as it traverses this hostile data network. This security feature may be provided in different ways, for example either through a secure connection such as a virtual private network tunnel (see FIGS. 3A and 3B described below) or encryption on a per message basis such as using the Secure Multipurpose Internet Mail Extensions (S-MIME) protocol (FIGS. 4A and 4B) or using SMTP over Secure Sockets Layer (SSL) which runs “on top of” TCP/IP, i.e. uses TCP/IP to support application tasks such as displaying web pages or running email servers (see FIG. 5).
Returning to FIG. 1, as inbound messages are received over the hostile data network 130 at the translation gateway 141, they may be forwarded to an email server for storage (not shown) from which they can be accessed by a client program running in the notebook computer 180 and which has been configured (with a security certificate that allows access to its user's email box) by an administrator of the customer network. As mentioned above, this client program may alternatively be running in other types of devices, such as a desktop computer, a personal digital assistant (PDA), a mobile phone unit (not shown) or any type of networked electronic appliance.
Another embodiment of the invention lies in an outbound service provided to subscribers of the UMSP. The outbound service may be implemented as follows. As part of its contract for secure messaging services, the subscriber is informed, by the service provider, of a domain name such as secure.outboundservice.com which represents a domain of outbound resources in the UMSP network 110 that is owned or administered by the service provider. In the embodiment of FIG. 1, it is the same translation gateway 120 used for inbound services that is assigned the domain name for outbound service. A client program, such as an email client of the subscriber, may then send an outbound message, in the form of an attachment for example, that is addressed to the domain name. For fax and voice messages in particular, the service provider further instructs the subscriber to add the destination, circuit switched network address (e.g., telephone number) as a prefix (e.g., 13108205988@secure.outboundservice.com) prior to sending the outbound message. This prefix will then be interpreted by the translation gateway 120, to determine the appropriate outbound resource within the UMSP network 110 that will be able to forward the message to its ultimate destination, namely the indicated telephone number.
The outbound message is first delivered to the translation gateway 141 via email through the customer network 150. This getaway 141 then determines, through for example a lookup table (not shown), the data network address of the translation gateway 120 belonging to the service provider. In other words, the translation gateway 141 recognizes the mapping between the domain name in the address of the email message and, for example, an IP address of the service provider's translation gateway 120. The message, and in particular the attachment in the case of email, is then sent through the hostile data network 130 while maintaining privacy, and arrives at the translation gateway 120. There, after verifying that the message is from a current subscriber (by, for example, analyzing the “from” field of the email), the translation gateway 120 may determine what is the most efficient manner of delivering the message to its intended recipient. For example, if the message is intended to be delivered to a facsimile number, then an outbound resource that has a fax telephoning card may be designated to receive the message. If the message is a voice message that is for example an audio or video recording, then a audio or video telephoning card that can relay such a message to the intended recipient is designated to receive the message. Alternatively, the message may be placed into a queue from which messages are pulled, according to their types, by the various outbound resources as these become available to transmit. The message then may be routed through the UMSP network 110 which, as mentioned above, may be a globally distributed network. Thus for example the translation gateway 120 may be located in one country but the outbound resource which places the phone call, for example to transmit the fax or play back the voice message, or otherwise transmits the outbound message, is located in another country.
Turning now to FIGS. 3A and 3B, what is shown is a network environment where the messaging service provides security services on a per connection basis. In this embodiment, a virtual private network (VPN) tunnel is established between predefined ports of the translation gateway 120 and translation gateway 141, for customer B. The VPN tunnel at port X of gateway 120 may be viewed as an extension of customer B's data network 350, while the one at port Y of gateway 121 is an extension of customer A's data network 351. In this embodiment, the gateways actually may be implemented as routers, where the gateways 120 and 141 feature routers that are preferably both administered by customer B, while those in gateways 121, 142 are administered by in this case customer A. Additional VPN tunnels may be established for the benefit of another corporate or institutional subscriber. Data traffic through the VPN tunnels is secure in that as messages are traversing through the data network 130 their privacy, as well as other security features such as integrity, are maintained in the face of attacks. The VPN tunnels may be used for both inbound and outbound messages.
Note that each of the routers shown in FIG. 3A has a unique IP address on the hostile data network 130. After a port is negotiated between two routers, the two routers form a virtual private network with the ability to communicate messages securely between them, over the hostile data network 130. It should be noted again that the gateway 141 (router for customer B) is a node of customer B's data network 350, but not of the UMSP network 110 (see FIG. 3B). Similarly, the router in the translation gateway 142 is a node of customer A's data network 351, but not the UMSP network 110. At the other end of the hostile data network 130, the routers in both gateways 120, 121 are different nodes of both the hostile data network 130 and the UMSP network 110, but not of either customer A's data network 350 or customer B's data network 351.
As was mentioned above, the messaging service may provide the ability to forward both inbound and outbound messages for its subscribers. As another example, FIG. 3B shows a number of devices that can source inbound messages, and receive outbound messages. These devices include a conventional facsimile machine 371, 372, a landline telephone unit 373, 374, a cellular mobile unit 375, and a desktop or notebook computer 377. In this embodiment, all of these devices communicate through the circuit switched network (PSTN) 160. The service provider may contract with local phone companies to lease a number of telephone lines of the circuit switched network 160. Thus, in the example shown in FIG. 3B, there are lines leased in New York, Los Angeles, and Chicago. These lines connect the circuit switched network 160 to local phone company switches 380-382. The switches 380-382 are communicatively coupled to notify one or more voice/fax cards 390, that are in respective inbound and outbound servers 392-394, that there is an incoming call to a given inbound address (e.g., telephone number) assigned to a line leased by the service provider. The servers 392-394 are respective nodes of the UMSP network 110.
A customer information database 396 may also be provided as part of the UMSP network 110, as a central storage for customer account information. Such customer account information would include for example the information shown in the table of FIG. 2. In addition, translation options if any for each subscriber may also be included in this database. This database 396 may also be accessed by the translation gateway 120, to determine which translation functions need to be applied to the messages of a particular subscriber. For example, certain messages may need to be translated from one protocol to another, or from one format to another, prior to being forwarded. Thus, the database 396 may indicate that facsimile messages should be translated into an instant messaging (IM) format for use by a particular client (IM) process 379 (see FIG. 3A), rather than by an email client 364. Other customer-specified translation and filtering rules may also be stored in the database 396. Of course, portions of the database 396 may be copied to other elements of the UMSP network within local, cache-type storage units (not shown).
Still referring to FIG. 3A, note that the translation gateway 141 for customer B is configured in this embodiment to recognize that different types of inbound messages through its port X may need to be processed differently. For example, email messages would be forwarded to email server 362 (which may be a separate node of customer B's data network 350), while other types of messages such as instant messaging (IM) would be forwarded to an IM storage area or directly to the client process 379 if the IM client is on line. Other forms of groupware may also be supported by the translation gateway 141, to deliver inbound messages to a predefined client process, or receive outbound messages from certain client processes.
It should be noted that the above-described embodiments of the messaging service are a for-profit service for which subscribers have agreed to pay on a monthly basis, or some other interval for billing. These secure services may be offered to the subscribers at an additional premium, above a basic set of unified messaging services in which inbound and/or outbound messages are delivered for the subscriber without guaranteeing their privacy or integrity as they traverse a hostile data network. The service provider may provide the subscriber a report or bill for example on a monthly basis that details the charges incurred by the subscriber including the type of service used and how it was used as well as how often it was used.
Turning now to FIGS. 4A and 4B, these show a network environment where inbound messages are delivered securely to corporate subscribers company A and company B using encryption on a per-message basis. In this embodiment, the translation gateway 120 has a security function that when applied precludes unauthorized access to the content of inbound messages as these are forwarded by the translation gateway 120 through the hostile data network, in this case being the Internet 230, to either translation gateway 141 or 241 (see FIG. 4B). Thus, the same translation gateway 120 may be used to apply a security function to messages on behalf of more than one corporate subscriber. The security function in this embodiment is to translate the inbound messages that have been captured by an inbound resource 420 (and which may originate from a conventional fax machine 470) into S-MIME format, and address these encrypted messages to the domain name of the respective customer A or B (previously assigned to the translation gateway 141 or 241). When these encrypted messages are received by the translation gateway 141 or 241, they may be converted into MIME in this embodiment, and then handed off to an email server that is on the data network 452 (and administered by company A), or that is on the data network 454 (administered by company B). These email messages may then be accessed by authorized client processes that are running in for example a personal digital assistant (PDA) 455 or a notebook computer 457, over their respective data networks 452, 454.
The same translation gateways 141, 241 used for inbound service may also be used for outbound service. A security function may be added by which an outbound email message (sourced from for example the PDA 455 or notebook computer 457) is translated from MIME to S-MIME, after being pulled from the respective email servers 424, 428. For example, all email messages addressed to the domain secure.outboundservice.com are pulled from the email server and following the conversion to S-MIME are forwarded through the Internet 230 to the translation gateway 120 (which is assigned to receive all messages addressed to that domain). The translation gateway 120 and the translation gateways 141, 241 had previously exchanged security certificate keys for implementing the S-MIME protocol, to ensure privacy on a per message encryption basis through the Internet 230. For example, a single set of security certificate keys may be exchanged that is applied by the gateway 141 or 241, to encrypt all of its outbound messages addressed to the service provider's domain at secure.outboundservice.com. Note that while the gateway 120 is administered by the service provider, the gateways 141, 241 are preferably administered by the respective subscribers, company A and company B.
At the translation gateway 120, as the outbound messages are received in S-MIME format, they are verified as being from a current subscriber (e.g., by checking the “from” field in the case of an email message), and are then decrypted and routed to the appropriate outbound resource 421, in the UMSP network 110 (see FIG. 4A). Again, as an example, if the outbound message is an email message that has a facsimile attachment (e.g., a word processor file or an image file) and is addressed to 13108205988@secure.outboundservice.com, then a routing function in the UMSP network 110 will recognize that the outbound resource 421 has a fax transmission card located in the 310-area code, such that the attachment can be transmitted relatively cheaply as a local, facsimile protocol call made from that fax card to the given number identified in the prefix of the email address.
Another embodiment of the invention bypasses or avoids the need for a translation gateway 141 that is on the customer network 452 (see FIG. 4B). In that case, the translation gateway 120 would still perform the conversion to S/MIME (for inbound messages) and from S/MIME (for outbound messages), for transmission across the Internet 230 of messages on behalf of company A. However, in the inbound case, the S/MIME message is delivered directly to the email server 424 on customer network 452, and then it is the customer's email client software running in the PDA 455 which provides the decryption functionality required for the customer to read the message. In that case, every user or affiliate of company A, on the customer network 452, may be required to obtain a secure certificate, exchange the certificate with the UMSP network 110 and configure their e-mail client to utilize this certificate for reading encrypted messages. The administrative overhead to provide such functionality may be so great for a medium to large customer network (where there are a large number of affiliates that will use the secure messaging service) as to justify the alternative solution of the translation gateway 141.
Utilizing a translation gateway to provide enhanced messaging functionality may benefit the unified messaging service provider, in the following ways. A large, distributed UMSP network 110 may consist of hundreds if not thousands of devices distributed globally, some for capturing inbound messages (such as voice and facsimile over the PSTN) and others for transmitting outbound messages (again, such as facsimile and voice over the PSTN). By utilizing the translation gateway 120 to provide the translation functions that are applied to inbound and/or outbound messages, additional functionality can be centralized within the UMSP network 110 rather than distributed to every device within the network. This allows the service provider to provide enhanced functionality quickly and cost effectively without requiring a “fork lift upgrade” to the UMSP network 110.
Referring now to FIG. 5, a block diagram of another environment for implementing a secure messaging service is illustrated. In this embodiment, the higher level, data communications protocol used to securely send inbound and outbound messages through the Internet 556 is referred to as a SSL tunnel that connects an email server 524 in company A's internal data network 552, to an email server 564 in the service provider's internal data network 560. The email servers 524, 564 are administered by company A and the service provider, respectively. The inbound and outbound messages are in this embodiment email messages that may be formed in accordance with SMTP and communicated through the Internet 556 “on top of” SSL. This SSL tunnel is implemented by software that allows the encryption of arbitrary TCP connections inside SSL. Thus, the SSL tunnel application may allow one to secure non-SSL aware daemons and protocols (like POP, IMAP, LDAP, etc.) by having SSL tunnel provide the encryption, without requiring changes to the daemon's code.
In operation, the SSL tunnel is a transient connection that is created when, for example, in the case of an inbound message, the service provider's email server 564 has received an inbound message (including, for example, a facsimile or voice file attachment) that is addressed to the domain of company A. The SSL tunnel application (which may be running in the email server 564) recognizes that the company A domain is handled by company A's email server 524, and on that basis creates the SSL tunnel by exchanging security information with the email server 524. Of course, a corresponding SSL tunnel application is running in the company A domain, and in particular in the email server 524, so as to complete the negotiation of security information. Once the secure connection has been established, the inbound message, under control of for instance SMTP, is handed to the SSL tunnel program which then “wraps” the inbound message and sends the message through the SSL tunnel to the email server 524. At the email server 524, the SSL wrapper is undone and the message is handed up to the SMTP software component, where the latter makes the inbound message available for access by a client process in company A's internal data network 552. As mentioned above, this inbound message within the email server 524 may now be accessed through a variety of different client processes that may be running in, for example, a PDA 504, a mobile phone unit 508 (with data or text capability, in addition to voice, and the further capability of accessing the internal data network 552 through a wireless data connection), a notebook computer 516, or a desk top computer 520. Such a secure transfer of the inbound message from the service provider's network 560 to a subscriber's network is seamless to the client process.
Similarly, for outbound messages, as these are collected in the email server 524 of company A's internal data network 552, a SSL tunnel application that may be running in the email server 524 obtains knowledge of these outbound messages that may have been enqueued, and selects one (addressed to the service provider's domain). An SSL wrapper is then applied to the selected outbound message and a SSL tunnel is negotiated with the email server 564 in the service provider's domain. After the outbound message securely arrives at the service provider's domain, the SSL wrapper is undone and the outbound message is enqueued in the email server 564. Software (that may be also running in the email server 564) detects that the outbound message is from company A's domain, and accordingly verifies (through some customer information database, not shown) that the account of company A is current. The outbound message may then be transferred, still using SMTP for example, to any one of the outbound resources 568, 570, and 572 for instance, depending upon which can most efficiently forward the outbound message into the PSTN 580. Following a translation into a format suitable for communication over the PSTN 580, the outbound message is transmitted through any one of telecommunication lines 569, 571, and 573, after having invoked the circuit switch network address of the recipient's receiver, e.g. a landline telephone 581, a mobile phone 583, or a fax machine 584. Again, the secure sending of outbound messages from the subscriber's network to that of the service provider is seamless to the subscriber's client process from which the message originated.
Using the SSL tunnel application, as described above, may also obviate the need for more expensive and more complex software that supports VPN tunnels (FIG. 3A), or an S-MIME connection (FIG. 4A). Of course, additional software that provides billing information to the customer, including identifying the inbound and outbound messages that were successfully transferred, as well as the total cost to the customer for such services, may also be needed to run in the service provider's internal data network 560, but is not explicitly shown.
Turning now to FIG. 6, this figure is a block diagram of an environment for implementing a secure messaging service that may be particularly suitable for individual subscribers. In this embodiment, inbound messages are provided with privacy as they traverse the Internet 230, as follows. First, the messages are captured by an inbound resource 420, similar to the situation in FIG. 4A. The inbound message may originate as an incoming telephoning call made from either a facsimile machine 470 or a telephone unit 472 to the inbound circuit-switched address (here, telephone number) assigned to the subscriber. After the message has been processed into the desired digital format, the inbound message is stored in a message storage server 508 on behalf of the subscriber. The storage server 508 may be a separate node of the UMSP network 110. Next, a messaging application server 510, which is also another node of the UMSP network 110, obtains knowledge of the stored message and will then send a resource locator link (such as Universal Resource Locator, URL) over a hostile data network such as the Internet 230, to a client process actually being used by, or to be used by, a subscriber of the secure messaging service. The messaging application server 510 may be implemented as a modified version of the secure message delivery technology referred to as IME by Tumbleweed Communications, Corp., Redwood City, Calif. The client process may be a client program (e.g., email; instant messaging) running in once again for example a desktop computer 514, a notebook computer 516, or other networked data device. The subscriber may then be instructed by the service provider (e.g., via a text prompt that accompanied the link) to invoke this link so as to establish a connection with the UMSP network 110 (and in this embodiment, the messaging application server 510) to securely receive the stored inbound message. The connection may be, for example, a Secure Socket Layer (SSL) connection over which all data being transferred over the Internet 230 to the client process is encrypted for maintaining privacy. Using such a technique, the subscriber may be prompted to login to a secure web site after having invoked its SSL URL, with a password known only to the subscriber and that was previously assigned by the service provider, so that only the subscriber can login to retrieve her inbound messages. In such an embodiment, there is no need for the client process and the messaging application server 510 to exchange security certificates in order to deliver inbound messages to the subscriber.
It will be appreciated by those skilled in the art that the block diagrams herein represent conceptual views of illustrative circuitry and/or software embodying the principles of the invention. Similarly, it will be appreciated that any flow charts, flow diagrams, pseudocode and the like represent various processes which may be substantially represented in computer readable medium and so executed by a computer or processor, whether or not explicitly shown.
The functions of the various elements shown in the figures, including functional blocks labeled as “processors” or “servers” may be provided through the use of dedicated hardware as well as hardware capable of executing software in association with appropriate software. When provided by a processor, server or computer, the functions may be provided by a single dedicated processor, by a single shared processor, or by a plurality of individual processors, some of which may be shared. Moreover, explicit use of the term “processor”, “server”, or “computer” should not be construed to refer exclusively to hardware capable of executing software, and may implicitly include, without limitation, digital signal processor (DSP) hardware, read-only memory (ROM) for storing software, random access memory (RAM), and non-volatile storage. Other hardware and/or software, standard and/or custom, may also be included.
To summarize, various embodiments of providing enhanced messaging services using translation gateways have been described. In the foregoing specification, the invention has been described with reference to specific exemplary embodiments thereof. It will, however, be evident that various modifications and changes may be made thereto without departing from the broader spirit and scope of the invention as set forth in the appended claims. The specification and drawings are, accordingly, to be regarded in an illustrative rather than a restrictive sense.

Claims (17)

What is claimed is:
1. A system for supporting a messaging service, comprising:
a computer server coupled with a circuit switched network to receive an inbound message from the circuit switched network, to apply a translation function to the inbound message, and to transmit the translated inbound message to a message storage server;
the message storage server to receive and store the translated inbound message; and
a messaging application server to obtain a location of where the translated inbound message is stored, to transmit a resource locator link over a hostile packet switched network to a customer computer, and to establish a virtual private network (VPN) tunnel between the messaging application server and the customer computer over the hostile packet switched network, in response to the customer computer invoking the resource locator link so that the customer computer can securely receive the translated inbound message through the VPN tunnel.
2. The system of claim 1, wherein the resource locator link includes the location of where the translated inbound message is stored so that the customer computer can securely retrieve the translated inbound message through the VPN tunnel.
3. The system of claim 1, wherein the resource locator link is a universal resource locator (URL).
4. The system of claim 1, wherein the hostile packet switched network is the Internet.
5. The system of claim 1, wherein the inbound message is a facsimile message.
6. The system of claim 1, wherein the inbound message is a voice message.
7. A method for providing a secure messaging service, comprising:
assigning a separate set of one or more circuit switched network addresses to each of a plurality of corporate customers of the messaging service;
associating the set of circuit switched network addresses for each customer with an internet domain of the customer;
receiving an inbound message that is addressed to one of the set of circuit switched network addresses of a given customer;
applying a translation function to the inbound message;
storing the translated inbound message;
transmitting a resource locator link, including a location of where the translated inbound message is stored, over a hostile packet switched network to an internet domain of the given customer;
establishing a virtual private network (VPN) tunnel with the given customer in response to an invocation of the resource locator link by the given customer; and
transmitting the translated inbound message over the hostile packet switched network through the established VPN tunnel.
8. The method of claim 7, wherein the resource locator link is a universal resource locator (URL).
9. The method of claim 7, wherein the hostile packet switched network is the Internet.
10. The method of claim 7, wherein the inbound message is a facsimile message.
11. The method of claim 7, wherein the inbound message is a voice message.
12. The system of claim 2 wherein the hostile packet switched network is the Internet and the inbound message is a facsimile message.
13. The system of claim 3 wherein the hostile packet switched network is the Internet and the inbound message is a facsimile message.
14. The system of claim 2 wherein the hostile packet switched network is the Internet and the inbound message is a voice message.
15. The system of claim 3 wherein the hostile packet switched network is the Internet and the inbound message is a voice message.
16. The method of claim 8 wherein the hostile packet switched network is the Internet and the inbound message is a voice message.
17. The method of claim 8 wherein the hostile packet switched network is the Internet and the inbound message is a facsimile message.
US13/463,153 2002-10-16 2012-05-03 Enhancing messaging services using translation gateways Expired - Lifetime US8600014B2 (en)

Priority Applications (1)

Application Number Priority Date Filing Date Title
US13/463,153 US8600014B2 (en) 2002-10-16 2012-05-03 Enhancing messaging services using translation gateways

Applications Claiming Priority (4)

Application Number Priority Date Filing Date Title
US41916602P 2002-10-16 2002-10-16
US10/686,107 US7539291B2 (en) 2002-10-16 2003-10-15 Enhancing messaging services using translation gateways
US12/471,225 US8175229B2 (en) 2002-10-16 2009-05-22 Enhancing messaging services using translation gateways
US13/463,153 US8600014B2 (en) 2002-10-16 2012-05-03 Enhancing messaging services using translation gateways

Related Parent Applications (1)

Application Number Title Priority Date Filing Date
US12/471,225 Continuation US8175229B2 (en) 2002-10-16 2009-05-22 Enhancing messaging services using translation gateways

Publications (2)

Publication Number Publication Date
US20120213348A1 US20120213348A1 (en) 2012-08-23
US8600014B2 true US8600014B2 (en) 2013-12-03

Family

ID=32110220

Family Applications (3)

Application Number Title Priority Date Filing Date
US10/686,107 Active 2027-02-13 US7539291B2 (en) 2002-10-16 2003-10-15 Enhancing messaging services using translation gateways
US12/471,225 Active 2024-10-18 US8175229B2 (en) 2002-10-16 2009-05-22 Enhancing messaging services using translation gateways
US13/463,153 Expired - Lifetime US8600014B2 (en) 2002-10-16 2012-05-03 Enhancing messaging services using translation gateways

Family Applications Before (2)

Application Number Title Priority Date Filing Date
US10/686,107 Active 2027-02-13 US7539291B2 (en) 2002-10-16 2003-10-15 Enhancing messaging services using translation gateways
US12/471,225 Active 2024-10-18 US8175229B2 (en) 2002-10-16 2009-05-22 Enhancing messaging services using translation gateways

Country Status (3)

Country Link
US (3) US7539291B2 (en)
AU (1) AU2003285896A1 (en)
WO (1) WO2004036373A2 (en)

Families Citing this family (58)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6898627B1 (en) * 1997-07-25 2005-05-24 Canon Kabushiki Kaisha Communication device having the capability of performing information exchange between a facsimile medium and an electronic information medium such as an e-mail medium
US8266266B2 (en) 1998-12-08 2012-09-11 Nomadix, Inc. Systems and methods for providing dynamic network authorization, authentication and accounting
US7194554B1 (en) 1998-12-08 2007-03-20 Nomadix, Inc. Systems and methods for providing dynamic network authorization authentication and accounting
US8713641B1 (en) 1998-12-08 2014-04-29 Nomadix, Inc. Systems and methods for authorizing, authenticating and accounting users having transparent computer access to a network using a gateway device
AU1224101A (en) 1999-10-22 2001-05-08 Nomadix, Inc. Gateway device having an xml interface and associated method
US8045203B2 (en) * 2000-03-28 2011-10-25 Mongonet Methods and apparatus for secure facsimile transmissions to electronic storage destinations
US8184318B2 (en) 2000-03-28 2012-05-22 Mongonet Methods and apparatus for compositing facsimile transmissions to electronic storage destinations
US8275100B2 (en) * 2000-03-28 2012-09-25 Mongonet Methods and apparatus for billing of facsimile transmissions to electronic storage destinations
US6424426B1 (en) * 2000-03-28 2002-07-23 Mongonet Fax-to-email and email-to-fax communication system and method
US7944573B2 (en) 2000-03-28 2011-05-17 Mongonet Methods and apparatus for authenticating facsimile transmissions to electronic storage destinations
US7826100B2 (en) * 2000-03-28 2010-11-02 Mongonet Methods and apparatus for facsimile transmissions to electronic storage destinations including embedded barcode fonts
US7079275B2 (en) * 2000-03-28 2006-07-18 Mongonet Method and system for facilitating paper to electronic communications
US7940411B2 (en) 2000-03-28 2011-05-10 Mongonet Method and system for entry of electronic data via fax-to-email communication
US8035834B2 (en) 2000-03-28 2011-10-11 Mongonet Methods and apparatus for manipulating and providing facsimile transmissions to electronic storage destinations
US8045204B2 (en) * 2000-03-28 2011-10-25 Mongonet Methods and apparatus for facsimile transmissions to electronic storage destinations including tracking data
US8023132B2 (en) 2000-03-28 2011-09-20 Mongonet Method and system for transferring digitized representations of documents via computer network transfer protocols
US8023131B2 (en) 2000-03-28 2011-09-20 Mongonet Method and system for combining separate digitized representations of documents for retransmission via computer network transfer protocols
US7755790B2 (en) 2000-03-28 2010-07-13 Mongonet Method and system for transferring sponsored digitized representations of documents via computer network transfer protocols
US7817295B2 (en) 2000-03-28 2010-10-19 Mongonet Method and system for modified document transfer via computer network transfer protocols
US7746496B2 (en) * 2000-03-28 2010-06-29 Mongonet Method and system for pay per use document transfer via computer network transfer protocols
DE60329584D1 (en) * 2002-03-20 2009-11-19 Research In Motion Ltd SYSTEM AND METHOD FOR SENDING AND USING THE MESSAGES
US7752334B2 (en) * 2002-10-15 2010-07-06 Nomadix, Inc. Intelligent network address translator and methods for network address translation
US7797459B1 (en) * 2003-02-11 2010-09-14 At&T Intellectual Property Ii, L.P. Access independent common architecture for real-time communications services for networking environments
US8705518B1 (en) 2003-02-24 2014-04-22 At&T Intellectual Property Ii, L.P. Apparatus and method for controlling services and operations in converged communications networks
US7870187B2 (en) * 2003-12-31 2011-01-11 Microsoft Corporation Transport agnostic pull mode messaging service
US20050243978A1 (en) * 2004-04-14 2005-11-03 Lg Electronics Inc. System and method of interworking messages between mobile communication terminals
US7512984B2 (en) * 2004-06-01 2009-03-31 Imera Systems, Inc. Distributed and scalable instant multimedia communication system
US7636841B2 (en) * 2004-07-26 2009-12-22 Intercall, Inc. Systems and methods for secure data exchange in a distributed collaborative application
US7702669B2 (en) 2004-09-02 2010-04-20 Ringcentral, Inc. Synchronization in unified messaging systems
EP1825384A2 (en) * 2004-10-20 2007-08-29 Sam J. Meo A method and system for providing reconciliation of semantic differences amongst multiple message service providers
US20060187891A1 (en) * 2005-02-24 2006-08-24 Jussi-Pekka Sairanen Provision of services in a communication system
DE102005013907A1 (en) * 2005-03-24 2006-09-28 Siemens Ag Network-independent provision and registration for services
US7583662B1 (en) * 2005-04-12 2009-09-01 Tp Lab, Inc. Voice virtual private network
US20070087730A1 (en) * 2005-10-17 2007-04-19 Sbc Knowledge Ventures L.P. Protocol converter
US8996620B2 (en) 2005-11-18 2015-03-31 Aol Inc. Promoting interoperability of presence-based systems through the use of ubiquitous online identities
EP1879345A1 (en) * 2006-07-12 2008-01-16 British Telecommunications Public Limited Company Method for sending a Session Initiation Protocol (SIP) message using SIP encapsulation
EP3955180A1 (en) * 2006-07-20 2022-02-16 BlackBerry Limited System and method for electronic file transmission
US8181227B2 (en) * 2006-08-29 2012-05-15 Akamai Technologies, Inc. System and method for client-side authenticaton for secure internet communications
DE102006047112A1 (en) * 2006-09-27 2008-04-03 T-Mobile International Ag & Co. Kg Method for networking a plurality of convergent messaging systems and corresponding network system
US8352553B2 (en) * 2007-04-30 2013-01-08 Microsoft Corporation Electronic mail connector
US8499340B2 (en) * 2007-05-29 2013-07-30 Telefonaktiebolaget L M Ericsson (Publ) IMS network identity management
US8312475B2 (en) * 2007-09-26 2012-11-13 Microsoft Corporation Remote control of computing devices via two disparate networks
US8037298B2 (en) * 2008-01-31 2011-10-11 Park Avenue Capital LLC System and method for providing security via a top level domain
US8195540B2 (en) 2008-07-25 2012-06-05 Mongonet Sponsored facsimile to e-mail transmission methods and apparatus
US20100082750A1 (en) * 2008-09-29 2010-04-01 Microsoft Corporation Dynamically transforming data to the context of an intended recipient
US9734466B2 (en) * 2008-11-11 2017-08-15 Sap Se Multi-tenancy engine
US8713688B2 (en) * 2010-03-24 2014-04-29 Microsoft Corporation Automated security analysis for federated relationship
US8751795B2 (en) * 2010-09-14 2014-06-10 Mo-Dv, Inc. Secure transfer and tracking of data using removable non-volatile memory devices
US8972507B1 (en) * 2011-01-21 2015-03-03 West Corporation Agent-assisted and directed web-channel customer care apparatus, method, and computer program
CN103079175B (en) * 2011-10-26 2019-08-30 中兴通讯股份有限公司 A kind of media information sending method and system across operation system
KR101971621B1 (en) * 2011-11-11 2019-04-24 삼성전자주식회사 Method and apparatus for brokering between server and device and computer readable recording medium
US8249230B1 (en) 2012-01-09 2012-08-21 EC Data Systems, Inc. Scalable and flexible internet fax architecture
US8254538B1 (en) 2012-02-27 2012-08-28 EC Data Systems, Inc. Scalable and flexible internet fax architecture for processing outbound fax messages
US20140059108A1 (en) * 2012-08-27 2014-02-27 Microsoft Corporation Unified communication interface for distributed computing
US9130904B2 (en) * 2013-05-08 2015-09-08 Texas Instruments Incorporated Externally and internally accessing local NAS data through NSFV3 and 4 interfaces
US10277778B2 (en) 2014-06-24 2019-04-30 Ec Data Systems Inc. Audit logging for a secure, scalable and flexible internet fax architecture
US10171532B2 (en) * 2014-09-30 2019-01-01 Citrix Systems, Inc. Methods and systems for detection and classification of multimedia content in secured transactions
US11729588B1 (en) 2021-09-30 2023-08-15 T-Mobile Usa, Inc. Stateless charging and message handling

Citations (55)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US4941170A (en) 1989-03-20 1990-07-10 Tandem Computers Incorporated Facsimile transmissions system
US5115326A (en) 1990-06-26 1992-05-19 Hewlett Packard Company Method of encoding an e-mail address in a fax message and routing the fax message to a destination on a network
US5193110A (en) 1990-10-09 1993-03-09 Boston Technology, Incorporated Integrated services platform for telephone communication system
US5333266A (en) 1992-03-27 1994-07-26 International Business Machines Corporation Method and apparatus for message handling in computer systems
US5406557A (en) 1993-02-01 1995-04-11 National Semiconductor Corporation Interenterprise electronic mail hub
US5479411A (en) 1993-03-10 1995-12-26 At&T Corp. Multi-media integrated message arrangement
US5561703A (en) 1994-07-06 1996-10-01 Rolm Company System and method for integration of a paging server into a private branch exchange environment
US5568536A (en) 1994-07-25 1996-10-22 International Business Machines Corporation Selective reconfiguration method and apparatus in a multiple application personal communications device
US5568540A (en) 1993-09-13 1996-10-22 Active Voice Corporation Method and apparatus for selecting and playing a voice mail message
US5579472A (en) 1994-11-09 1996-11-26 Novalink Technologies, Inc. Group-oriented communications user interface
US5608786A (en) 1994-12-23 1997-03-04 Alphanet Telecom Inc. Unified messaging system and method
US5623601A (en) 1994-11-18 1997-04-22 Milkway Networks Corporation Apparatus and method for providing a secure gateway for communication and data exchanges between networks
US5675507A (en) 1995-04-28 1997-10-07 Bobo, Ii; Charles R. Message storage and delivery system
US5765033A (en) 1997-02-06 1998-06-09 Genesys Telecommunications Laboratories, Inc. System for routing electronic mails
US5870454A (en) * 1997-04-01 1999-02-09 Telefonaktiebolaget L M Ericsson Telecommunications speech/text conversion and message delivery system
US6020980A (en) 1996-09-30 2000-02-01 Mci Communications Corporation Facsimile delivery to electronic mail
US6061448A (en) 1997-04-01 2000-05-09 Tumbleweed Communications Corp. Method and system for dynamic server document encryption
US6073165A (en) 1997-07-29 2000-06-06 Jfax Communications, Inc. Filtering computer network messages directed to a user's e-mail box based on user defined filters, and forwarding a filtered message to the user's receiver
US6085231A (en) * 1998-01-05 2000-07-04 At&T Corp Method and system for delivering a voice message via an alias e-mail address
US6119137A (en) 1997-01-30 2000-09-12 Tumbleweed Communications Corp. Distributed dynamic document conversion server
US6151675A (en) 1998-07-23 2000-11-21 Tumbleweed Software Corporation Method and apparatus for effecting secure document format conversion
US6192407B1 (en) 1996-10-24 2001-02-20 Tumbleweed Communications Corp. Private, trackable URLs for directed document delivery
US6208638B1 (en) 1997-04-01 2001-03-27 J 2 Global Communications, Inc. Method and apparatus for transmission and retrieval of facsimile and audio messages over a circuit or packet switched network
US6350066B1 (en) 1995-04-28 2002-02-26 Bobo, Ii Charles R. Systems and methods for storing, delivering, and managing messages
US6385655B1 (en) 1996-10-24 2002-05-07 Tumbleweed Communications Corp. Method and apparatus for delivering documents over an electronic network
US20020069062A1 (en) 1997-07-03 2002-06-06 Hyde-Thomson Henry C. A. Unified messaging system with voice messaging and text messaging using text-to-speech conversion
US20020077082A1 (en) 2000-12-18 2002-06-20 Nortel Networks Limited Voice message presentation on personal wireless devices
US20020097850A1 (en) 2001-01-23 2002-07-25 Roland Schemers Seamless message retrieval and transmittal during wireless application protocol session
US20020124057A1 (en) 2001-03-05 2002-09-05 Diego Besprosvan Unified communications system
US6502191B1 (en) 1997-02-14 2002-12-31 Tumbleweed Communications Corp. Method and system for binary data firewall delivery
US6549612B2 (en) * 1998-05-06 2003-04-15 Telecommunications Premium Services, Inc. Unified communication services via e-mail
US6564321B2 (en) 1995-04-28 2003-05-13 Bobo Ii Charles R Systems and methods for storing, delivering, and managing messages
US20030099334A1 (en) 2001-11-28 2003-05-29 Contractor Sunil H. Transferring voice mail messages to a data network
US6597688B2 (en) 1998-06-12 2003-07-22 J2 Global Communications, Inc. Scalable architecture for transmission of messages over a network
US20030152203A1 (en) 2002-02-13 2003-08-14 Berger Adam L. Message accessing
US6609196B1 (en) 1997-07-24 2003-08-19 Tumbleweed Communications Corp. E-mail firewall with stored key encryption/decryption
US6625258B1 (en) 1999-12-27 2003-09-23 Nortel Networks Ltd System and method for providing unified communication services support
US6625642B1 (en) 1998-11-06 2003-09-23 J2 Global Communications System and process for transmitting electronic mail using a conventional facsimile device
US20030202641A1 (en) 1994-10-18 2003-10-30 Lucent Technologies Inc. Voice message system and method
US6693893B1 (en) 1998-07-28 2004-02-17 At&T Corp. Method and apparatus for accessing a telephone network from the internet
US6707890B1 (en) 2002-09-03 2004-03-16 Bell South Intellectual Property Corporation Voice mail notification using instant messaging
US6707891B1 (en) * 1998-12-28 2004-03-16 Nms Communications Method and system for voice electronic mail
US6718030B1 (en) 2000-08-10 2004-04-06 Westell Technologies, Inc. Virtual private network system and method using voice over internet protocol
US6741705B1 (en) 2000-02-23 2004-05-25 Cisco Technology, Inc. System and method for securing voice mail messages
US20040100648A1 (en) 1995-09-15 2004-05-27 Kulakowski Robert T. System for communicating facsimile and audio information in standard e-mail attachment format
US6751298B2 (en) * 2001-06-29 2004-06-15 International Business Machines Corporation Localized voice mail system
US20050088977A1 (en) * 2000-12-14 2005-04-28 Nortel Networks Limited Dynamic virtual private network (VPN) tunnel quality of service (QoS) treatment
US6981023B1 (en) 1999-03-09 2005-12-27 Michael Hamilton Message routing
US7007085B1 (en) 2001-09-28 2006-02-28 Bellsouth Intellectual Property Corporation Message log for wireline, voice mail, email, fax, pager, instant messages and chat
US7127741B2 (en) 1998-11-03 2006-10-24 Tumbleweed Communications Corp. Method and system for e-mail message transmission
US20070124397A1 (en) 2002-05-24 2007-05-31 Bellsouth Intellectual Property Corporation Systems and Methods for Forwarding Text, Voice, and Data in a Telecommunications Network
US20070129060A1 (en) 2001-12-18 2007-06-07 Bellsouth Intellectual Property Corporation Voice mailbox with management support
US20090052638A1 (en) 2002-09-19 2009-02-26 At & T Intellectual Property I, L.P. Provisioning Unified Messaging System Services
US20090182828A1 (en) 1997-06-17 2009-07-16 Cranberry Properties Llc Electronic mail distribution system for integrated electronic communications
US20100122089A1 (en) 2001-06-12 2010-05-13 Research In Motion Limited System and method for compressing secure e-mail for exchange with a mobile data communication device

Patent Citations (57)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US4941170A (en) 1989-03-20 1990-07-10 Tandem Computers Incorporated Facsimile transmissions system
US5115326A (en) 1990-06-26 1992-05-19 Hewlett Packard Company Method of encoding an e-mail address in a fax message and routing the fax message to a destination on a network
US5193110A (en) 1990-10-09 1993-03-09 Boston Technology, Incorporated Integrated services platform for telephone communication system
US5333266A (en) 1992-03-27 1994-07-26 International Business Machines Corporation Method and apparatus for message handling in computer systems
US5406557A (en) 1993-02-01 1995-04-11 National Semiconductor Corporation Interenterprise electronic mail hub
US5479411A (en) 1993-03-10 1995-12-26 At&T Corp. Multi-media integrated message arrangement
US5568540A (en) 1993-09-13 1996-10-22 Active Voice Corporation Method and apparatus for selecting and playing a voice mail message
US5561703A (en) 1994-07-06 1996-10-01 Rolm Company System and method for integration of a paging server into a private branch exchange environment
US5568536A (en) 1994-07-25 1996-10-22 International Business Machines Corporation Selective reconfiguration method and apparatus in a multiple application personal communications device
US20030202641A1 (en) 1994-10-18 2003-10-30 Lucent Technologies Inc. Voice message system and method
US5579472A (en) 1994-11-09 1996-11-26 Novalink Technologies, Inc. Group-oriented communications user interface
US5623601A (en) 1994-11-18 1997-04-22 Milkway Networks Corporation Apparatus and method for providing a secure gateway for communication and data exchanges between networks
US5608786A (en) 1994-12-23 1997-03-04 Alphanet Telecom Inc. Unified messaging system and method
US5675507A (en) 1995-04-28 1997-10-07 Bobo, Ii; Charles R. Message storage and delivery system
US6350066B1 (en) 1995-04-28 2002-02-26 Bobo, Ii Charles R. Systems and methods for storing, delivering, and managing messages
US6564321B2 (en) 1995-04-28 2003-05-13 Bobo Ii Charles R Systems and methods for storing, delivering, and managing messages
US20040100648A1 (en) 1995-09-15 2004-05-27 Kulakowski Robert T. System for communicating facsimile and audio information in standard e-mail attachment format
US6020980A (en) 1996-09-30 2000-02-01 Mci Communications Corporation Facsimile delivery to electronic mail
US6192407B1 (en) 1996-10-24 2001-02-20 Tumbleweed Communications Corp. Private, trackable URLs for directed document delivery
US6385655B1 (en) 1996-10-24 2002-05-07 Tumbleweed Communications Corp. Method and apparatus for delivering documents over an electronic network
US6487599B1 (en) 1996-10-24 2002-11-26 Tumbleweed Communications Corp. Electronic document delivery system in which notification of said electronic document is sent a recipient thereof
US6119137A (en) 1997-01-30 2000-09-12 Tumbleweed Communications Corp. Distributed dynamic document conversion server
US5765033A (en) 1997-02-06 1998-06-09 Genesys Telecommunications Laboratories, Inc. System for routing electronic mails
US6502191B1 (en) 1997-02-14 2002-12-31 Tumbleweed Communications Corp. Method and system for binary data firewall delivery
US6208638B1 (en) 1997-04-01 2001-03-27 J 2 Global Communications, Inc. Method and apparatus for transmission and retrieval of facsimile and audio messages over a circuit or packet switched network
US6061448A (en) 1997-04-01 2000-05-09 Tumbleweed Communications Corp. Method and system for dynamic server document encryption
US5870454A (en) * 1997-04-01 1999-02-09 Telefonaktiebolaget L M Ericsson Telecommunications speech/text conversion and message delivery system
US20090182828A1 (en) 1997-06-17 2009-07-16 Cranberry Properties Llc Electronic mail distribution system for integrated electronic communications
US20020069062A1 (en) 1997-07-03 2002-06-06 Hyde-Thomson Henry C. A. Unified messaging system with voice messaging and text messaging using text-to-speech conversion
US6609196B1 (en) 1997-07-24 2003-08-19 Tumbleweed Communications Corp. E-mail firewall with stored key encryption/decryption
US6073165A (en) 1997-07-29 2000-06-06 Jfax Communications, Inc. Filtering computer network messages directed to a user's e-mail box based on user defined filters, and forwarding a filtered message to the user's receiver
US6085231A (en) * 1998-01-05 2000-07-04 At&T Corp Method and system for delivering a voice message via an alias e-mail address
US6549612B2 (en) * 1998-05-06 2003-04-15 Telecommunications Premium Services, Inc. Unified communication services via e-mail
US6597688B2 (en) 1998-06-12 2003-07-22 J2 Global Communications, Inc. Scalable architecture for transmission of messages over a network
US6151675A (en) 1998-07-23 2000-11-21 Tumbleweed Software Corporation Method and apparatus for effecting secure document format conversion
US6693893B1 (en) 1998-07-28 2004-02-17 At&T Corp. Method and apparatus for accessing a telephone network from the internet
US7127741B2 (en) 1998-11-03 2006-10-24 Tumbleweed Communications Corp. Method and system for e-mail message transmission
US6625642B1 (en) 1998-11-06 2003-09-23 J2 Global Communications System and process for transmitting electronic mail using a conventional facsimile device
US6707891B1 (en) * 1998-12-28 2004-03-16 Nms Communications Method and system for voice electronic mail
US6981023B1 (en) 1999-03-09 2005-12-27 Michael Hamilton Message routing
US6625258B1 (en) 1999-12-27 2003-09-23 Nortel Networks Ltd System and method for providing unified communication services support
US6741705B1 (en) 2000-02-23 2004-05-25 Cisco Technology, Inc. System and method for securing voice mail messages
US6718030B1 (en) 2000-08-10 2004-04-06 Westell Technologies, Inc. Virtual private network system and method using voice over internet protocol
US20050088977A1 (en) * 2000-12-14 2005-04-28 Nortel Networks Limited Dynamic virtual private network (VPN) tunnel quality of service (QoS) treatment
US20020077082A1 (en) 2000-12-18 2002-06-20 Nortel Networks Limited Voice message presentation on personal wireless devices
US20020097850A1 (en) 2001-01-23 2002-07-25 Roland Schemers Seamless message retrieval and transmittal during wireless application protocol session
US20020124057A1 (en) 2001-03-05 2002-09-05 Diego Besprosvan Unified communications system
US20100122089A1 (en) 2001-06-12 2010-05-13 Research In Motion Limited System and method for compressing secure e-mail for exchange with a mobile data communication device
US6751298B2 (en) * 2001-06-29 2004-06-15 International Business Machines Corporation Localized voice mail system
US7007085B1 (en) 2001-09-28 2006-02-28 Bellsouth Intellectual Property Corporation Message log for wireline, voice mail, email, fax, pager, instant messages and chat
US20030099334A1 (en) 2001-11-28 2003-05-29 Contractor Sunil H. Transferring voice mail messages to a data network
US6683940B2 (en) 2001-11-28 2004-01-27 Sunil H. Contractor Transferring voice mail messages to a data network
US20070129060A1 (en) 2001-12-18 2007-06-07 Bellsouth Intellectual Property Corporation Voice mailbox with management support
US20030152203A1 (en) 2002-02-13 2003-08-14 Berger Adam L. Message accessing
US20070124397A1 (en) 2002-05-24 2007-05-31 Bellsouth Intellectual Property Corporation Systems and Methods for Forwarding Text, Voice, and Data in a Telecommunications Network
US6707890B1 (en) 2002-09-03 2004-03-16 Bell South Intellectual Property Corporation Voice mail notification using instant messaging
US20090052638A1 (en) 2002-09-19 2009-02-26 At & T Intellectual Property I, L.P. Provisioning Unified Messaging System Services

Non-Patent Citations (11)

* Cited by examiner, † Cited by third party
Title
"Tumbleweed Offers a Secure Transparent Email Solution", Tumbleweed Press Releases, Redwood City, CA, Mar. 21, 2001, Tumbleweed Communications Corp., Internet article at: http://www.tumbleweed.com/news/press-releases/2001/2001-03-21 . . ., 2 pages.
"Tumbleweed Offers a Secure Transparent Email Solution", Tumbleweed Press Releases, Redwood City, CA, Mar. 21, 2001, Tumbleweed Communications Corp., Internet article at: http://www.tumbleweed.com/news/press—releases/2001/2001-03-21 . . ., 2 pages.
"Tumbleweed Unveils Integrated Messaging Exchange(TM) 4.0", Tumbleweed Press Releases, Los Angeles, CA, Apr. 5, 2000, Tumbleweed Communications Corp., Internet article at: http://www.tumbleweed.com/news/press-releases/2000/2000-04-05. . ., 2 pages.
"Tumbleweed Unveils Integrated Messaging Exchange™ 4.0", Tumbleweed Press Releases, Los Angeles, CA, Apr. 5, 2000, Tumbleweed Communications Corp., Internet article at: http://www.tumbleweed.com/news/press—releases/2000/2000-04-05. . ., 2 pages.
Final Office Action (dated Nov. 1, 2011), U.S. Appl. No. 12/471,225, Date filed-Oct. 15, 2003, First Named Inventor: Leo A. D'Angelo, 5 pages.
Final Office Action (dated Nov. 1, 2011), U.S. Appl. No. 12/471,225, Date filed—Oct. 15, 2003, First Named Inventor: Leo A. D'Angelo, 5 pages.
Non-Final Office Action (dated Apr. 15, 2008), U.S. Appl. No. 10/686,107, Date filed Oct. 15, 2003, First Named Inventor: Leo A. D'Angelo, 24 pages.
Non-Final Office Action (dated Jul. 26, 2011), U.S. Appl. No. 12/471,225, Date filed-May 22, 2009, First Named Inventor: Leo A. D'Angelo, 19 pages.
Non-Final Office Action (dated Jul. 26, 2011), U.S. Appl. No. 12/471,225, Date filed—May 22, 2009, First Named Inventor: Leo A. D'Angelo, 19 pages.
PCT International Search Report (dated Apr. 27, 2004), International Application No. PCT/US03/32945-International Filing Date Oct. 16, 2003, 6 pages.
PCT International Search Report (dated Apr. 27, 2004), International Application No. PCT/US03/32945—International Filing Date Oct. 16, 2003, 6 pages.

Also Published As

Publication number Publication date
WO2004036373A2 (en) 2004-04-29
US20090225961A1 (en) 2009-09-10
US7539291B2 (en) 2009-05-26
AU2003285896A8 (en) 2004-05-04
WO2004036373A3 (en) 2004-07-01
AU2003285896A1 (en) 2004-05-04
US20120213348A1 (en) 2012-08-23
US20040165603A1 (en) 2004-08-26
US8175229B2 (en) 2012-05-08

Similar Documents

Publication Publication Date Title
US8600014B2 (en) Enhancing messaging services using translation gateways
US10038779B2 (en) Intercepting voice over IP communications and other data communications
CA2477652C (en) Method and process for signaling, communication and administration of networked objects
US7613923B2 (en) Method and apparatus for controlling unsolicited messaging in real time messaging networks
CA2598328C (en) Method and apparatus for voice over internet protocol telephony using a virtual private network
EP1885096B1 (en) Application session border element
US6667971B1 (en) System and method for enhanced ADSL architecture and service concepts
US20060025113A1 (en) Methods, systems, and storage mediums for providing message delivery and notification services
JP4564881B2 (en) Voice communication system
Cisco T.38 Fax Services for Cisco 1750 Access Routers
Cisco T.37/T.38 Fax Gateway and Fax Detection for Cisco 1751, Cisco 3725, and Cisco 3745
US11689681B2 (en) Method and system for distributing and receiving fax transmissions via a data connection that is owned by a service provider
JP2000101633A (en) Mail distributor
Mahbub Study of Voice over Internet Protocol (VoIP) in an Enterprise Network Through Simulation
WO2001067305A1 (en) Methods and apparatus for delegating administrative capabilities to domains served by mail providers
JP2009110403A (en) E-mail transmission/reception system
EP1635527A1 (en) Method for addressing a device in behalf of establishing a communication path between a telephony network and a data network
Hutchison et al. Skype and SIP PBX Interoperability
House et al. VOIP-Location for Emergency Calls (Architecture)

Legal Events

Date Code Title Description
STCF Information on status: patent grant

Free format text: PATENTED CASE

AS Assignment

Owner name: J2 GLOBAL, INC., CALIFORNIA

Free format text: CHANGE OF NAME;ASSIGNOR:J2 GLOBAL COMMUNICATIONS, INC.;REEL/FRAME:032911/0182

Effective date: 20111205

AS Assignment

Owner name: ADVANCED MESSAGING TECHNOLOGIES, INC., CALIFORNIA

Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNOR:J2 GLOBAL, INC.;REEL/FRAME:032975/0464

Effective date: 20140517

FPAY Fee payment

Year of fee payment: 4

MAFP Maintenance fee payment

Free format text: PAYMENT OF MAINTENANCE FEE, 8TH YEAR, LARGE ENTITY (ORIGINAL EVENT CODE: M1552); ENTITY STATUS OF PATENT OWNER: LARGE ENTITY

Year of fee payment: 8

AS Assignment

Owner name: J2 CLOUD SERVICES, LLC, CALIFORNIA

Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNOR:ADVANCED MESSAGING TECHNOLOGIES, INC.;REEL/FRAME:057937/0001

Effective date: 20211007

AS Assignment

Owner name: MUFG UNION BANK, N.A., AS COLLATERAL AGENT, ARIZONA

Free format text: SECURITY INTEREST;ASSIGNOR:J2 CLOUD SERVICES, LLC;REEL/FRAME:059357/0003

Effective date: 20220304